Senior Security Engineer, Product

Overview

Job Description

Responsibilities

• - Build the secure paved roads like SAST, DAST, secrets scanning, dependency hygiene, secure-by-default templates, libraries and everything else that helps our team to move fast and secure
• - Threat model and review designs with product and engineering teams, feeding the results into the paved roads that make the next launch more secure-by-default
• - Own the product security vendor program: AppSec tooling, pentest vendors, bug bounty platform - from selection through onboarding to operation and renewal
• - Co-own vulnerability response and bug bounty triage with the rest of the Security team

Required Skills

• - Experience at a high-growth startup or scaleup (50-500 employees)
• - Proven excellence in Product Security and/or Application Security
• - Production software engineering experience: read, review and write code across our stack (Ruby, JavaScript/TypeScript, Go)
• - Experience with: Cloud security (GCP/AWS, IAM, VPC, Secret(s) Manager, Cloud Run/GKE/Fargate, Security Command Center/Security Hub) and familiarity with Terraform
• - AppSec tooling: SAST, SCA, secret scanning, and supply-chain tooling
• - Threat modeling with engineering teams
• - Procuring and managing security vendors (pentest firms, bug bounty platforms)
• - AI-assisted security proficiency: use AI effectively and responsibly in your day-to-day work and for building systems
• - Strong communication skills and the ability to influence engineers instead of just gatekeeping
• - Ability to work independently and prioritize in a fast-paced environment

Benefits

• - Competitive compensation and stock options
• - Stipends for your home office or work setup
• - Budget for learning and development to fuel your career
• - Free phone and international data plan